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Product Overview 


SRX Series Services Gateways 
for the branch are next- 
generation security gateways 
that provide essential 
capabilities that connect, secure, 
and manage workforce locations 
sized from handfuls to hundreds 
of users. By consolidating fast, 
highly available switching, 
routing, security, and next 
generation firewall capabilities in 
a single device, enterprises can 
protect their resources as well 
as economically deliver new 
services, safe connectivity, and a 
satisfying end-user experience. 
All SRX Series Services 
Gateways, including products 
scaled for Enterprise branch, 
Enterprise edge, and Data 
Center applications, are 
powered by Junos OS—the 
proven operating system that 
provides unmatched 
consistency, better performance 
with services, and superior 
infrastructure protection at a 
lower total cost of ownership. 
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Product Description 


The Juniper Networks® SRX Series Services Gateways for the branch combine next 
generation firewall and unified threat management (UTM) services with routing and 
switching in a single, high-performance, cost-effective network device. 


e SRX Series for the branch runs Juniper Networks Junos® operating system, the proven 
OS that is used by core Internet routers in all of the top 100 service providers around 
the world. The rigorously tested carrier-class routing features of IPv4/IPv6é, OSPF, 
BGP, and multicast have been proven in over 15 years of worldwide deployments. 








e SRX Series for the branch provides perimeter security, content security, application 
visibility, tracking and policy enforcement, user role-based control, threat intelligence 








through integration with Juniper Networks Spotlight Secure*, and network-wide threat 








visibility and control. Using zones and policies, network administrators can configure 











and deploy branch SRX Series gateways quickly and securely. Policy-based VPNs 
support more complex security architectures that require dynamic addressing and split 
tunne 








ing. The SRX Series also includes wizards for firewall, [IPsec VPN, Network 








Address Translation (NAT), and initial setup to simplify configurations out of the box. 
e For content security, SRX Series for the branch offers a complete suite of next 














generation firewall, unified threat management (UTM) and threat intelligence services 





consisting of: intrusion prevention system (IPS), application security (AppSecure), user 





role-based firewall controls, on-box and cloud-based antivirus, antispam, and 











enhanced Web filtering to protect your network from the latest content-borne threats. 
ntegrated threat intelligence via Spotlight Secure offers adaptive threat protection 
against command and control (C&C) related botnets and policy enforcement based on 
GeolP and attacker fingerprinting technology (the latter for Web application 
protection)—all of which are based on Juniper provided feeds. Customers may also 





























everage their own custom and third-party feeds for protection from advanced 
alware and other threats. The branch SRX Series integrates with other Juniper 














ea) 


ecurity products to deliver enterprise-wide unified access control (UAC) and adaptive 
threat management. 














e SRX Series for the branch are secure routers that bring high performance and proven 
deployment capabilities to enterprises that need to build a worldwide network of 





thousands of sites. The wide variety of options allow configuration of performance, 





functionality, and price scaled to support from a handful to thousands of users. 
Ethernet, serial, T1/E1, DS3/E3, xDSL, Wi-Fi, and 3G/4G LTE wireless are all available 
options for WAN or Internet connectivity to securely link your sites. Multiple form 











factors allow you to make cost-effective choices for mission-critical deployments. 








anaging the network is easy using the proven Junos OS command-line interface 
CLI), scripting capabilities, a simple-to-use Web-based GUI, or Juniper Networks 
Junos® Space Security Director for centralized management. 








*Available on SRX550 and higher devices 
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Architecture and Key Components 


Key Hardware Features of the Branch SRX Series Products 


SRX100 Services 
Gateway 


SRX110 Services 
Gateway 


SRX210 Services 
Gateway 


SRX220 Services 
Gateway 


SRX240 Services 
Gateway 


SRX550 Services 
Gateway 


SRX650 Services 
Gateway 


Eight 10/100 Ethernet LAN ports and 1 USB port (support for 3G USB) 

Full UTM?; antivirus‘, antispam’, enhanced Web filtering', and content filtering 
Intrusion prevention system‘, AppSecure* 

2 GB DRAM, 2 GB flash default 


VDSL/ADSL2+ and Ethernet WAN interfaces 

Eight 10/100 Ethernet LAN ports and two USB port (support for 3G USB) 

Full UTM?; antivirus', antispam’, enhanced Web filtering’, intrusion prevention system', AppSecure! 
Unified Access Control (UAC) and content filtering 

2 GB DRAM, 2 GB CF default 


Two 10/100/1000 Ethernet and 6 10/100 Ethernet LAN ports, 1 Mini-PIM slot, and 2 USB ports (support for 3G USB) 
Factory option of 4 dynamic Power over Ethernet (PoE) ports 802.3af 

Support for T1/E1, serial, ADSL/2/2+, VDSL, G.SHDSL, and Ethernet small form-factor pluggable transceiver (SFP) 
Content Security Accelerator hardware for faster performance of IPS and ExpressAV (with high memory version) 

Full UTM?; antivirus‘, antispam*, enhanced Web filtering', and content filtering 

Intrusion prevention system’, User role-based firewall, and AppSecure* 

2 GB DRAM, 2 GB flash defaul 


Eight 10/100/1000 Ethernet LAN ports, 2 Mini-PIM slots 

Factory option of 8 PoE ports; PoE+ 802.3at, backwards compatible with 802.3af 
Support for T1/E1, serial, ADSL2/2+, VDSL, G.SHDSL, and Ethernet SFP 

Content Security Accelerator hardware for faster performance of IPS and ExpressAV 
Full UTM?; antivirus', antispam’, enhanced Web filtering’, and content filtering 
Intrusion prevention system’, User role-based firewall and AppSecuret 

2 GB DRAM, 2 GB CF default 




















16 10/100/1000 Ethernet LAN ports, 4 Mini-PIM slots 

Factory option of 16 PoE ports; PoE+ 802.3at, backwards compatible with 802.3af 
Support for T1/E1, serial, ADSL2/2+, VDSL, G.SHDSL, and Ethernet SFP 
Content Security Accelerator hardware for faster performance of IPS and ExpressAV 
Full UTM?; antivirus', antispam’, enhanced Web filtering', and content filtering 
Intrusion prevention system‘, AppSecure* 





c 





Ten fixed Ethernet ports (6 10/100/1000 copper, 4 SFP), 2 Mini-PIM slots, 6 GPIM slots or multiple GPIM and XPIM combinations 

Support for T1/E1, serial, ADSL2/2+, VDSL, G.SHDSL, DS3/E3, Gigabit Ethernet ports; supports up to 52 Ethernet ports including SFP; 40 switch ports with 
optional PoE including 802.3at, PoE+, backwards compatible with 802.3af (or 50 non-PoE 10/100/1000 copper ports) 

Content Security Accelerator hardware for faster performance of IPS and ExpressAV 

Full UTM?; antivirus‘, antispam’, enhanced Web filtering*, and content filtering 

Intrusion prevention system’, User role-based firewall, and AppSecure? 

Threat intelligence for protection from command and control (C&C) botnets, Web application threats, and advanced malware, and policy enforcement based on 
GeolP data 
2 GB DRAM default, 2 GB compact flash default (SRX550) 

4 GB DRAM default, 8 GB compact flash default (SRX550 High Memory) 

Optional redundant AC power; standard AC power supply that is PoE-ready; PoE power up to 250 watts single power supply or 500 watts dual power supply 









































Four fixed ports 10/100/1000 Ethernet LAN ports, 8 GPIM slots or multiple GPIM and XPIM combinations 

Support for T1, E1, DS3/E3, Ethernet ports; supports up to 52 Ethernet ports including SFP; 48 switch ports with optional PoE including 802.3at, PoE+, backwards 
compatible with 802.3af (or 52 non-PoE 10/100/1000 copper ports) 

Content Security Accelerator hardware for faster performance of IPS and ExpressAV 

Full UTM?; antivirus‘, antispam’, enhanced Web filtering', and content filtering 

Intrusion prevention system’, User role-based firewall, and AppSecure? 

Threat intelligence for protection from command and control (C&C) botnets, Web application threats, and advanced malware, and policy enforcement based on 
GeolP data 

Modular Services and Routing Engine; future internal failover and hot-swap 

2 GB DRAM default, 2 GB compact flash default, external compact flash slot for additional storage 

Optional redundant AC power; standard AC power supply that is PoE-ready; PoE power up to 250 watts single power supply or 500 watts dual power supply 








‘Unified Threat Management—antivirus, antispam, Web filtering, AppSecure, and IPS require a subscription license option to use the feature. UTM is not supported on the low memory version. Please see the ordering section for options. Content 
Filtering and UAC are part of the base software with no additional license. 


Network Deployments 


The SRX Series Services Gateways for the branch are deployed at remote, branch and Enterprise edge locations in the network to provide 


all-in-one secure WAN connectivity, and connection to local PCs and servers via integrated Ethernet switching. 
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Features and Benefits 


Next Generation Firewall 


SRX Series Services Gateways deliver next generation firewall 
protection with application awareness and extensive user role- 
based control options plus best-of-breed UTM to protect and 
control your business assets. Next generation firewalls are able to 
perform full packet inspection and can apply security policies based 
on layer 7 information. This means you can create security policies 


based on the application running across your network, the user who 








is receiving or sending network traffic or the content that is 





traveling across your network to protect your environment against 








threats, manage how your network bandwidth is allocated, and 





control who has access to what. 


“Trust” Zone 


Intranet 


“Guest” Zone 





Figure 1: Firewalls, zones, and policies 


AppSecure 


AppSecure is a suite of application security capabilities for Juniper 
Networks SRX Series services Gateways that identifies applications 
for greater visibility, enforcement, control, and protection of the 
network. 


Intrusion Prevention 


The intrusion prevention system (IPS) understands application 
behaviors and weaknesses to prevent application-borne security 
threats that are difficult to detect and stop. 

Unified Threat Management (UTM) 

SRX Series can include comprehensive content security against 
malware, viruses, phishing attacks, intrusions, spam and other 
threats with unified threat management (UTM). Get a best-of-breed 
solution with anti-virus, anti-spam, web filtering and content 





filtering at a great value by easily adding these services to your SRX 
Series Services Gateway. Cloud-based and on-box solutions are 





both available. 


User Firewall 





Juniper offers a range of user role-based firewall control solutions 
that support dynamic security policies. User role-based firewall 
capabilities are integrated with the SRX Series Services Gateways 
for standard next generation firewall controls. More extensive, 
scalable, granular access controls for creating dynamic policies are 
available through the integration of SRX with a Juniper Unified 
Access Control solution. 


Adaptive Threat Intelligence 


To address the evolving threat landscape that has made it 
imperative to integrate external threat intelligence into the firewall 
for thwarting advanced malware and other threats, some SRX 





Series Services Gateways include threat intelligence via integration 
sal 


th Spotlight Secure. The Spotlight Secure threat intelligence 





platform aggregates threat feeds from multiple sources to deliver 








open, consolidated, actionable intelligence to SRX Series Services 





Gateways across the organization for policy enforcement. These 








sources include Juniper threat feeds, third party threat feeds and 


threat detection technologies that the customer can deploy. 


Administrators are able to define enforcement policies from all 








feeds via a single, centralized management point, Junos Space 
Security Director. 


Secure Routing 





Many organizations use both a router and a firewall/VPN at their 
network edge to fulfill their networking and security needs. For 
ions, the SRX Series for the branch can fulfill both 


roles with one solution. Juniper built best-in-class routing, switching 








many organiza 





and firewall capabilities into one product. 


SRX Series for the branch checks the traffic to see if it is legitimate 





and permissible, and only forwards it on when it is. This reduces the 
load on the network, allocates bandwidth for all other mission- 








critical applications, and secures the network from malicious users. 
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The main purpose of a secure router is to provide firewal having to fail over the entire system. This is consistent with a 
protection and apply policies. The firewall (zone) functionality typical active/standby nature of routing resiliency protocols. 
inspects traffic flows and state to ensure that originating and When SRX Series Services Gateways for the branch are configured 
returning information in a session is expected and permitted for a as an active/active HA pair, traffic and configuration is mirrored 
particular zone. The security policy determines if the session can automatically to provide active firewall and VPN session 
originate in one zone and traverse to another zone. Due to the maintenance in case of a failure. The branch SRX Series 
architecture, SRX Series receives packets from a wide variety of synchronizes both configuration and runtime information. As a 
clients and servers and keeps track of every session, of every result, during failover, synchronization of the following information 
application, and of every user. This allows the enterprise to make is shared: connection/session state and flow information, IPSec 
sure that only legitimate traffic is on its network and that traffic is security associations, Network Address Translation (NAT) traffic, 
flowing in the expected direction. address book information, configuration changes, and more. In 
High Availability contrast to the typical router active/standby resiliency protocols 
Junos Services Redundancy Protocol (JSRP) is a core feature of the SuCW as, ViTtUal Outer Readindaney Protoco) WRRE), ell: aynamic 
flow and session information is lost and must be reestablished in 





SRX Series for the branch. JSRP enables a pair of SRX Series 


1 is ; . ican the event of a failover. Some or all network sessions will have to 
systems to be easily integrated into a high availability networ 


architecture, with redundant physical connections between the nei ees _ eae =e one oA a 
systems and the adjacent network switches. With link redundancy, 1 I Oe NU ee eee ape ee ag re Ope reg ey 








: is kept intact. In an unstable network, this active/active 
Juniper Networks can address many common causes of system 











filiges ugh asaiphwslalnortselne baderacseleceiine configuration also mitigates link flapping affecting session 


performance. 

















disconnected, to ensure that a connection is available without 


Active/Standby Active/Standby 





Figure 2: High availability 
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Session-Based Forwarding Without the Performance Hit 


In order to optimize the throughput and latency of the combined 
router and firewall, Junos OS implements session-based forwarding, 
an innovation that combines the session state information of a 
traditional firewall and the next-hop forwarding of a classic router 
into a single operation. With Junos OS, a session that is permitted 
by the forwarding policy is added to the forwarding table along with 
a pointer to the next-hop route. Established sessions have a single 
table lookup to verify that the session has been permitted and to 
find the next hop. This efficient algorithm improves throughput and 
owers latency for session traffic when compared with a classic 
router that performs multiple table lookups to verify session 
information and then to find a next-hop route. 








Figure 3 shows the session-based forwarding algorithm. When a 
new session is established, the session-based architecture within 


ing 


Small Office 














Junos OS verifies that the session is allowed by the forwarding 
policies. If the session is allowed, Junos OS will look up the next- 
hop route in the routing table. It then inserts the session and the 
next-hop route into the session and forwarding table and forwards 
the packet. Subsequent packets for the established session require 
a single table lookup in the session and forwarding table, and are 
forwarded to the egress interface. 
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Figure 3: Session-based forwarding algorithm 
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Figure 4: The distributed enterprise 
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SRX550 SRX650 
Specifications Encapsulations 
Protocols e Ethernet (MAC and VLAN tagged) 


e |Pv4, IPvé, ISO Connectionless Network Service (CLNS) * Point-to-Point Protocol (PPP) (synchronous) 
- Multilink Point-to-Point Protocol (MLPPP) 
e Frame Relay 





Routing and Multicast 


















































* Static routes ultilink Frame Relay (MLFR) (FRF.15, FRF.16), FRF.12, LFI 
* RiPv2 +v1 * High-Level Data Link Control (HDLC) 
* OSPF/OSPFv3 * Serial (RS-232, RS-449, X.21, V.35, EIA-530) 
* BGP ¢ 802.1q VLAN support 
* BGP Router Reflector’ e Point-to-Point Protocol over Ethernet (PPPoE) 
e 1S-1S 
e Multicast (Internet Group Management Protocol L2 Switching? 
IGMPv1/2/3), PIM-SM/DM/SSM, Session Description * 802.1Q, 802.1D, RSTP, MSTP, 802.3ad (LACP) 
Protocol (SDP), Distance Vector Multicast Routing Protocol * 802.1x, LLDP, 802.1ad (Q-in-Q), IGMP Snooping 
DVMRP), source-specific, Multicast inside IPsec tunnel), « Layer 2 switching with high availability 
SDP a Traffic Management Quality of Service (QoS) 
e MPLS (RSVP, LDP, Circuit Cross-connect (CCC), Translational » 802.1p. DSCP. EXP 
Cross-connect (TCC), Layer 2 VPN (VPLS), Layer 3 VPN, VPLS, : - , 
EMER e Marking, policing, and shaping 
) e Class-based queuing with prioritization 
IP Address Management e Weighted random early detection (WRED) 
e Static * Queuing based on VLAN, data-link connection identifier 
* DHCP. PPPoE client DLCl), interface, bundles, or multi-field (MF) filters 
¢ Internal DHCP server, DHCP Relay * Guaranteed bandwidth 
e Maximum bandwidt 
Address Translation _ 
e Ingress traffic policing 








e Source NAT with Port Address Translation (PAT) 
e Static NAT 
e Destination NAT with PAT 
e Persistent NAT, NAT64 


e Priority-bandwidth utilization 





e DiffServ marking 














e Virtual channels 
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Security 





Firewall 


NGFW/UTMS$ 


Firewall, zones, screens, policies 
Stateful firewall, stateless filters 
etwork attack detection 


(Cp) 


creens denial of service (DoS) and provides distributed denial 


ie) 


f service (DDoS) protection (anomaly-based) 





Prevent replay attack; Anti-Replay 





Unified Access Control 

- TCP reassembly for fragmented packet protection 
- Brute force attack mitigation 

= SY 
- Zone-based IP spoofing 


cookie protection 


- Malformed packet protection 


Intrusion Prevention System (IPS) 
- Protocol anomaly detection 
- Stateful protocol signatures 





- Intrusion prevention system (IPS) attack pattern obfuscation 
- User role-based policies 





Customer signatures creation 








Multiple times a week and emergency updates 
AppSecure 





- Apptrack (application visibility and tracking) 
- AppFirewa 


(policy enforcement by application name) 
- Custom signatures 

- AppQoS (network traffic prioritization and bandwidth 
management 








- Dynamic signature updates 





- User-based application policy enforcement 

Antivirus 

Express AV (stream-based AV, not available on SRX100 and 
SRX110) 

File-based antivirus 





- Signature database 
- Protocols scanned: POP3, HTTP, SMTP, IMAP, FTP 
- Antispyware 








- Anti-adware 











- Antikeylogger 


- Cloud-based antivirus 

Antispam 

Integrated enhanced Web filtering 

- Category granularity (90+ categories) 

- Real time threat score 

Redirect Web filtering 

Content Security Accelerator in SRX210 high memory, 
SRX220, SRX240, SRX550, and SRX650* 


e ExpressAV option in SRX210 high memory, SRX220 high 
memory, SRX240, SRX550, and SRX6504 
¢ Content filtering 
- Based on MIME type, file extension, and protocol 
commands 


VPN 


e Auto VPN (Zero Touch Hub) 

e Tunnels (GRE, IP-IP, IPsec) 

e |Psec, Data Encryption Standard (DES) (56-bit), triple Data 
Encryption Standard (8DES) (168-bit), Advanced Encryption 
Standard (AES) (128-bit+) encryption 

e Message Digest 5 (MD5), SHA-1, SHA-128, SHA-256 
authentication 





e Junos Pulse Dynamic VPN client; browser-based remote 
access feature requiring a license 

e |Pv4 and IPvé VPN 

e Multi-Proxy ID for site-to-site VPN 








Multimedia Transport 


¢ Compressed Real-Time Transport Protocol (CRTP) 


High Availability 





e VRRP 
e JSRP 
e Stateful failover and dual box clustering 
¢ SRX550/SRX650: 
- Redundant power (optional) 
- GPIM hot swap 
- Future internal failover and SRE hot swap (OIR) on SRX650 
e Backup link via 3G/4G LTE wireless or other WAN 
e Active/active—L3 mode? 











¢ Active/passive—L3 mode° 








¢ Configuration synchronization? 





e Session synchronization for firewall and VPN° 
e Session failover for routing change® 











e Device failure detection? 
e Link failure detection® 
e IP Monitoring with route and interface failover 
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IPvé 
¢ OSPFv3 
e RIPng 
e |Pv6 Multicast Listener Discovery (MLD) 
e« BGP 
e ISIS 


Wireless 


¢ CX111 Cellular 3G/4G/LTE Broadband Data Bridge supported 
on all branch SRX Series devices 
e¢ 3G USB modem support for SRX100, SRX110, and SRX210 


SLA, Measurement, and Monitoring 


e Real-time performance monitoring (RPM) 
e Sessions, packets, and bandwidth usage 





e Juniper J-Flow monitoring and accounting services 
e IP Monitoring 


Logging 
e Syslog 
¢ Traceroute 
e Extensive control- and data-plane structured and unstructured 
syslog 


Administration 


e Juniper Networks Network and Security Manager support 
(NSM) 
e Juniper Networks Junos Space Security Director support 
e Juniper Networks STRM Series Security Threat Response 
Managers support 




















e Juniper Networks Advanced Insight Solutions support 
e External administrator database (RADIUS, LDAP, SecurelD) 
e Auto-configuration 








¢ Configuration rollback 
e Rescue configuration with button 








¢ Commit confirm for changes 

e Auto-record for diagnostics 

¢ Software upgrades (USB upgrade option) 
e Juniper Networks J-Web 





¢ Command-line interface 
e Smart image download 


Certifications 


e NEBS Compliance for SRX240, SRX650° 

e¢ Department of Defense (DoD) Certification for SRX Series 
Services Gateways, including testing and certification by the 
Department of Defense Joint Interoperability Test Command 
JITC) for interoperability with DoD networks and addition of 





the SRX Series Services Gateways to the Unified Capabilities 
Approved Product List (UC APL) 


* BGP Route Reflector supported on SRX550 and SRX650. See ordering section for more information. 

? As of Junos 15.1X49-D40, the SRX550 High Memory unit does not support xSTP, LLDP, 802.1x, Q-in-Q, IGMP 
Snooping and L2 switching with HA 

* Unified Threat Management - antivirus, antispam, Web filtering, AppSecure, and IPS require individual subscription 
license. UTM is not supported on the low memory version. Please see the ordering section for options. 

Unified Threat Management - antivirus, antispam, Web filtering, AppSecure and IPS require individual subscription 
license. UTM is not supported on the low memory version. Please see the ordering section for options. 

5SRX100B installed with 1 GB DRAM, with 512 MB accessible. Optional upgrade to 1 GB DRAM is available with 
purchase of memory software license key. 

¢Coming soon for SRX110 and SRX550. 
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Product Comparison 


SRX100 


Maximum Performance and Capacity 


Junos OS 12.1X44- Junos OS 12.1X44- Junos OS 12.1X44- 


Junos OS version tested 


Firewall performance 
(large packets) 


Firewal 
(IMIX) 


performance 


Firewal 
Byte) 


+ routing PPS (64 


Firewal 
(HTTP) 


IPsec VPN throughput 
(large packets) 


performance® 





IPsec VPN tunnels 


AppSecure firewall 
throughput® 


IPS (intrusion prevention 
system) 


Antivirus 


Connections per second 


Maximum concurrent 
sessions 


DRAM options 
Maximum security policies 


Maximum users 
supported 


Network Connectivity 


Fixed 1/O 


I/O slots 


Services and Routing 
Engine slots 


WAN/LAN interface 
options 


Maximum number of PoE 
ports (PoE optional on 
some SRX Series models) 


USB 
Routing 


Routing (Packet Mode) 
PPS 


BGP instances 
BGP peers 
BGP routes 
OSPF instances 
OSPF routes 





RIP v1 / v2 instances 
RIP v2 routes 

Static routes 
Source-based routing 


Policy-based routing 


D15 
700 Mbps 


200 Mbps 


70 Kpps 


100 Mbps 


65 Mbps 


128 
90 Mbps 


75 Mbps? 








25 Mbps (Sophos 
AV) 


1,800 
32K’ 


2 GB DRAM 
384 


Unrestricted 


8 x 10/100 


N/A 


No 


N/A 


N/A 


100 Kpps 


8K 


8K 


8K 
8K 
Yes 


Yes 


SRX110 


D15 
700 Mbps 


200 Mbps 


70 Kpps 


100 Mbps 


65 Mbps 


128 
90 Mbps 


75 Mbps 





25 Mbps (Sophos 
AV) 


1,800 
Sail) 


2 GB DRAM 
384 


Unrestricted 


8 x 10/100 VDSL/ 
ADSL2+ 

WAN (Annex A or 
B) 


N/A 


N/A 


N/A 


100 Kpps 


8K 


8K 


8K 
8K 
Yes 


Yes 


SRX210 


D15 
850 Mbps 


250 Mbps 


95 Kpps 


290 Mbps 


85 Mbps 


256 
250 Mbps 


65 Mbps 





30 Mbps (Sophos AV) 


2,200 
64 K’ 


2 GB DRAM 
512 


Unrestricted 


2 x 10/100/1000 
BASE-T + 6 x 10/100 


1x SRX Series 
Mini-PIM 


No 


See ordering 
information 


Up to 4 ports of 
802.3af with 
maximum 50 W 


2 


50 Kpps 


6K 


6K 


6K 
6K 
Yes 
Yes 





SRX220 


Junos OS 12.1X44- 
D15 


950 Mbps 


300 Mbps 


125 Kpps 


350 Mbps 


100 Mbps 


oA2 
300 Mbps 


80 Mbps 


35 Mbps (Sophos AV) 


2,800 
96K’ 


2 GB DRAM 
2,048 


Unrestricted 


8 x 10/100/1000 
BASE-T 


2 x SRX Series 
Mini-PIM 


No 


See ordering 
information 


Up to 8 ports of 
802.3af/at with 
maximum 120 W 


a 


200 Kpps 


16 
16 
32K 
16 
32 K 
16 
32K 
32K 
Yes 
Yes 


SRX240 


Junos OS 11.4R5 


1.8 Gbps 


600 Mbps 


200 Kpps 


830 Mbps 


300 Mbps 


1,000 


750 Mbps 


230 Mbps 
85 Mbps (Sophos AV) 


8,500 
256 K’ 





2 GB DRAM 
4,096 


Unrestricted 


16 x 10/100/1000 
BASE-T 


4 x SRX Series 
Mini-PIM 


No 


See ordering 
information 


Up to 16 ports of 
802.3af/at with 
maximum 150 W 


2 


300 Kpps 


20 

32 
600 K 
20 
200 K 
20 

32 K 
100K 
Yes 
Yes 


SRX550 


Junos OS 12.1/15.1’ 


7 Gbps 


2 Gbps 


700 Kpps 


2 Gbps 


1.0 Gbps 


2,000 
2.0 Gbps 


800 Mbps 





300 Mbps 
(Sophos AV) 


27,000 
S/S 


2 GB/4 GB’ DRAM 
8,000 


Unrestricted 


6 x 10/100/1000 
BASE-T + 4 SFP 


2 x SRX Series Mini- 
PIM, 6 x GPIM or 
multiple GPIM and 
XPIM combinations 


No 


See ordering 
information 


Up to 40 ports of 
802.3af/at with 
maximum 247 W 


a 


1000 Kpps 


56 
ne? 
712K 
56 
200 K 
56 

32 Kk 
100 K 
Yes 


es 


SRX650 


Junos OS 11.4R5 


7 Gbps 


2.5 Gbps 


850 Kpps 


2 Gbps 


1.5 Gbps 


3,000 
1.9 Gbps 


1 Gbps 


350 Mbps 
(Sophos AV) 


35,000 
512K 


2 GB DRAM 
8,192 


Unrestricted 


4 x 10/100/1000 
BASE-T 


8 x GPIM or multiple 
GPIM and XPIM 
combinations 


910 


See ordering 
information 


Up to 48 ports of 
802.3af/at with 
maximum 247 W 


2 per SRE 


1000 Kpps 


64 
256 
800 K 
64 
200 K 
64 
32K 
100 K 
Yes 


Yes 
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Equal-cost multipath 
(ECMP) 


Reverse path forwarding 
(RPF) 


IPsec VPN 
Concurrent VPN tunnels 
Tunnel interfaces 


DES (56-bit), 3DES (168- 
bit) and AES (256-bit) 


MD-5, SHA-1 and SHA-2 
authentication 


Manual key, Internet Key 
Exchange (IKE v1+v2), 
public key infrastructure 
(PKI) (X.509) 


Perfect forward secrecy 
(DH Groups) 


Prevent replay attack 


Dynamic remote access 
VPN 


Psec NAT traversal 


Redundant VPN gateways 





umber of remote access 
users 





SRX100 
Yes 


Yes 


128 
10 
Yes 


Yes 


Yes 


41,2,5 


Yes 
Yes 


Yes 
Yes 


25 users 


User Authentication and Access Control 


Third-party user 
authentication 


RADIUS accounting 


XAUTH VPN, Web-based, 
802.X authentication 


PKI certificate requests 
(PKCS 7 and PKCS 10) 


Certificate Authorities 
supported 





Virtualization 


jaximum number of 
security zones 


jaximum number of 
virtual routers 


jaximum number of 
VLANs 


Encapsulations 
PPP/MLPPP 
PPPoE 

PPPoA 


MLPPP maximum physical 
interfaces 


Frame Relay 
MLEFR (FRF .15, FRF .16) 


LFR maximum physical 
interfaces 


HDLC 
Wireless 


CX111 3G /4G LTE 
Bridge support 


Junos/SRX Series 
management of CX111 





Flash and Memory 
Memory (DRAM) 


RADIUS, RSA 
SecurelD, LDAP 


Yes 
Yes 


Yes 


Yes 


N/A 
Yes 

N/A 
N/A 


N/A 
N/A 
N/A 


N/A 


Yes 


Yes 


2 GB (SRX100H2) 


SRX110 


Yes 


Yes 


128 
10 


Yes 


Yes 


Yes 


ie) 


ES 


Yes 


eS 
Yes 


25 users 


RADIUS, RSA 
SecurelD, LDAP 


Yes 


Yes 


Yes 


Yes 


10 


16 


N/A 
Yes 
Yes 


N/A 


N/A 
N/A 
N/A 


N/A 


Yes 


Yes 


2 GB (SRX100H2) 


SRX210 
Yes 


Yes 


256 
64 
Yes 


Yes 


Yes 


1,235 


Yes 


Yes 


Yes 
Yes 


50 users 


RADIUS, RSA 
SecurelD, LDAP 


Yes 
Yes 


Yes 


12 


10 


64 


Yes 
Yes 


Yes 


Yes 
Yes 


Yes 


Yes 


Yes 


2 GB (SRX100H2) 


SRX220 
Yes 


Yes 


512 
64 
Yes 


Nes 


Wes 


2s 3) 


Yes 
Wes 


Wes 
Wes 
150 users 


RADIUS, RSA 
SecurelD, LDAP 


Wes 
eS 


Yes 


Yes 


24 


ills) 


128 


Yes 
Yes 
Yes 


Yes 
Yes 


Yes 


Yes 


Wes 


2 GB (SRX100H2) 


SRX240 
Yes 


Yes 


1,000 
128 
Yes 


Yes 


Yes 


1,.2;5 


Yes 


Yes 


Yes 


Yes 


250 users 


RADIUS, RSA 
SecurelD, LDAP 


Yes 
Yes 


Yes 


Yes 


64 


64 


2,000 


Yes 
Yes 


Yes 


Yes 


Yes 


Yes 


Yes 


Yes 


2 GB (SRX100H2) 


SRX550 
es 


Wes 


2,000 
456 
Yes 


es 


es 


i, 5) 


Yes 


Wes 


Nes 
es 
500 users 


RADIUS, RSA 
SecurelD, LDAP 


es 


Yes 


es 


es 


6 


128 


3,967 


Yes 
Yes 
Yes 
12 


es 
es 
12 


Yes: 


Yes 


Yes 


2 GB/4 GB" 


159, (o}o10) 


Yes 


Yes 


3,000 
512 


Yes 


Yes 


Yes 


12,5 


Yes 


Yes 


Yes 
Yes 


500 users 


RADIUS, RSA 
SecurelD, LDAP 


Yes 


Yes 


Yes 


Yes 


128 


128 


3,967 


Yes 
Yes 
Yes 


12 


Yes 
Yes 


12 


Yes 


Yes 


Yes 


2 GB (SRX650) 
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SRX100 SRX110 SRX210 SRX220 SRX240 SRX550 SRX650 
Memory slots Fixed memory Fixed memory Fixed memory Fixed memory Fixed memory 2 DIMM 4 DIMM 
Flash memory 2 GB 2 GB CF, externally 2 GB 2 GB CF, externally 2GB 2 GB/8 GB" CF 2 GB CF internal on 
accessible accessible internal SRE, external slot 
empty, up to 2 GB CF 
supported 
USB port for external Yes Yes Yes Yes Yes Yes Yes 
storage 
Dimensions and Power 
Dimensions (WxHxD) 8.5x14x ARO 2 Saihy 2 11.02 x 1.73 x 7.12 in (RIARSieieyereyeieinin 17.5 x 1.75 x Ear eeisie 17:5%:3:5°% 
5.8 in(21.6x3.6x 8.385 in (28.0x4.4x18.1cm) (36.3x4.4x18.1cm) 15.1 in(44.4x44x 18.2 in (44.4 x 8.8 x 18.2 in (44.4 x 8.8x 
14.7 cm) (28 x 4.37 x 21.3 38.5 cm) 46.2 cm) 46.2 cm) 
cm) 
Weight (device and power 2.5 Ib (1.1 kg) 6.7 |b 3.3 Ib (1.5 kg) 3.43 Ib For LM and HM-AC: 21.96 Ib 24.9 |b 
supply) (3.06 kg) non-PoE / 4.4 Ib (1.56 kg) 11.2 Ib (5.1 kg) For HM (9.96 kg) No interface (11.3 kg) 
(2 kg) PoE non-PoE - DC: 12.56 Ib (5.7 modules 1 power No interface modules 
No interface modules No interface modules kg) / 12.3 Ib supply 1 power supply 
(5.6 kg) PoE 
No interface modules 
Rack-mountable Yes, 1 RU Yes, 1 RU Yes, 1 RU Yes, 1 RU Yes, 1 RU Yes, 2 RU Yes, 2 RU 
Power supply (AC) 100-240 VAC, 30 100-240 VAC, 60 100-240 VAC, 100-240 VAC, 150 W for LM 100-240 VAC, single 100-240 VAC, 
Ww Ww 60 W non-PoE/ 60 W non-PoE / and HM 190 W for HM 645 W or dual 645 W__ single 645 W or 
150 W PoE 200 W PoE with DC 360 W for dual 645 W 
PoE 
Maximum PoE power N/A N/A 50 W 120 W 150 W 247 W redundant, or 247 W redundant, or 
494 W non-redundant 494 W non-redundant 
Average power 10 W 24W 28 W, 84 W (PoE) 28W SRX240H2 - 74 W 85 W 122 W 
consumption SRX240H2-DC - 72 W 
SRX240H2-PoE- 86 W 
Input frequency 50-60 Hz 50-60 Hz 50-60 Hz 50-60 Hz 50-60 Hz 50-60 Hz 50-60 Hz 
Maximum current 0.25A@100VAC 1.75A@100VAC 0.44A @ 100 VAC, 0.44 A @ 100 VAC 1.1 A@100VAC,3.0 7.5A@100 VAC with 5.3 A @ 100 VAC with 
consumption 1.13 A @ 100 VAC A @ 100 VAC (PoE) single PSU with PoE, single PSU with PoE, 
(PoE) 10.5 A @ 100 VAC 8.3 A @ 100 VAC with 
with dual PSU with dual PSU with PoE 
PoE 
Maximum inrush current 60A 7OA 80 A, 60 A for PoE 80A 40 A, 45 A for PoE 45 A for &frac12; cycle 45 A for &frac12; 
cycle 
Average heat dissipation 35 BTU/hr 81 BTU/hr 95 BTU/hr 104 BTU/hour 253 BTU/hr 238 BTU/hr 319 BTU/hr 
(SRX210HE2) 116 (SRX220H2) (SRX240H2) 246 
BTU/hr (SRX210HE2- BTU/hr (SRX240H2- 
PoE) DC 294 BTU/hr 
(SRX40H2- PoE) 
Maximum heat dissipation 80 BTU/hr 99 BTU/hr 126 BTU/hr 126 BTU/hour 427 BTU/hr 1,449 BTU/hr 699 BTU/hr 
(SRX210HE2) 157 (SRX220H2) (SRX240H2) 409 
BTU/hr (SRX210HE2- BTU/hr (SRX240H2- 
PoE) DC) 560 BTU/hr 
(SRX240H2-PoE) 
Redundant power supply No No No No No Yes (up to maximum Yes (up to maximum 
(hot swappable) capacity of single PSU) capacity of single PSU) 
Acoustic noise level (Per —_O dB (fanless) O dB (fanless) 29.1 dB SiidB 70.0 dB 51.8 dB 60.9 dB 


ISO 7779 Standard) 


Environment 


Operational temperature 39° tg 194° F 32° to 104° F 32° to 104° F 32° to 104° F 32° to 104° F 32° to 104° F 32° to 104° F 
(0° to 40° C) (0° to 40° C) (0° to 40° C) (0° to 40° C) (0° to 40° C) (0° to 40° C) (0° to 40° C) 
Nonoperational 4° to 158° F, AS Ttoage 4° to 158° F, AM io) iste -40° to 158° F, Alita) Al stot le 4° to 158° F, 
temperature (-20° to (-20° to (-20° to (-20° to (-40° to (-20° to (-20° to 
70° C) OPC) 70° C) FONG) 70° C) One) 70°C) 
Humidity (operating) 10% to 90% noncondensing 
Humidity (nonoperating) 5% to 95% noncondensing 
Mean time between 24.8 years 24.8 years 14.03 years 13.46 years 11.63 years 9.6 years with 9.6 years with 
failures (Telcordia model) (SRX210HE2) 10.26 = (SRX220H2) 11.06 (SRX240H2) 9.92 years redundant power redundant power 
years (SRX210HE2- years (SRX220H2- (SRX240H2-PoE) 
PoE) PoE) 
Certifications and Network Homologation 
USA 
Safety certifications UL 60950-1 UL 60950-1 UL 60950-1 UL 60950-1 UL 60950-1 UL 60950-1 UL 60950-1 
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EMC certifications 


Network homo! 


Canada 


logation 


Safety certification 


EMC certification 


Network homo! 


Australia 





logation 


Safety certifications 





EMC certifications 


Network homologation 


New Zealand 


Safety certifications 


EMC certifications 


Network homo! 


Japan 


logation 


Safety certifications 


EMC certifications 


European Union 





Safety certification 


EMC certification 


Network homologation 


Software Certifications 


NIST FIPS-140-2 Level 2 


ISO Common Criteria 
NDPP+TFFW EP 


USGv6 


7 Based on 2 GbE memory models, which require Junos OS 12.1X44-D15 (exception: Junos OS 11.4r5 for SRX240 only). 





SRX100 SRX110 SRX210 

FCC Class B FCC Class B FCC Class Bt 

TIA-968 TIA-968 TIA-968 

CSA 60950-1 CSA 60950-1 CSA 60950-1 

ICES class B ICES class B ICES class Bt 

CS-03 CS-03 CS-03 

AS / NZS AS / NZS AS / NZS 

60950-1 60950-1 60950-1 

AS / NZS AS / NZS AS / NZS 
CISPR22 CISPR22 Class B* 

CISPR22 Class B 

Class B 

AS / ACIF S AS / ACIF S AS / ACIF S 

002, S 016, S OOZFSIOLE TS) 002, S 016, S 043.1, 

043.1, $043.2 043.1, $043.2 $043.2 


AS / NZS 60950-1 AS/NZS 60950-1 AS/NZS 60950-1 


AS / NZS CISPR22 AS/NZS CISPR22. AS / NZS CISPR22 
Class B Class B Class Bt 


PTC 217, PTC 273 §RIG@raWaPiie@eres PTC 217, PTC 273 


SRX220 
FCC Class A 
TIA-968 


CSA 60950-1 
ICES Class A 
CS-03 


AS / NZS 
60950-1 


AS / NZS 
CISPR22 
Class A 


AS / ACIF S 
002, S 016, S 043.1, 
$043.2 


AS / NZS 60950-1 


AS / NZS CISPR22 
Class A 


PANG. 21077, PINE 2278) 


SRX240 
FCC Class A 
TIA-968 


CSA 60950-1 
ICES class A 
CS-03 


AS / NZS 
60950-1 


AS / NZS 
CISPR22 
Class A 


AS / ACIF S 
002, S 016, S 043.1, 
$043.2 


AS / NZS 60950-1 


AS / NZS CISPR22 
Class A 


PTC 217, PTC 273 


Comply safety certifications (UL/CUL/CSA) by CB Scheme 


VCCI Class B VCCI Class B VCCI Class B? 

EN 60950-1 EN 60950-1 EN 60950-1 

EN 55022 EN 55022 EN 55022 

Class B, Class B, Class BY, 

EN 300 386 EN 300 386 EN 300 386 

CTR 12/13, CTR) =CTR12/13, CTR CTR 12/13, CTR 21, 
21, DoC 2Al, Diol, DoC 

Yes Yes Yes 

Yes es Yes 

Yes eS Yes 


® Throughput numbers based on HTTP traffic with 44 kilobyte transaction size. 

? Use software based IPS engine which has higher performance and less capacity 

%© SRX650 supports a single Services and Routing Engine (SRE) as of software release 11.4. 
17: 4 GB DRAM and 8 GB CF is default on the SRX550 High Memory SKUs 
 SRX210H-POE is class A. 


VCCI Class A 


EN 60950-1 


EN 55022 
Class A, 
EN 300 386 


Cie eee ia 
DoC 


Res 


Yes 


Bes 


VCCI Class A 


EN 60950-1 


EN 55022 
Class A, 
EN 300 386 


CTR 12/13, CTR 21, 
DoC 


Yes 


Yes 


Yes 


SRX550 
FCC Class A 
TIA-966 


CSA 60950-1 
ICES class A 
(s708 


AS / NZS 
60950-1 


AS / NZS 
CISPR22 
Class A 


AS / ACIF S 
016 


AS / NZS 60950-1 


AS / NZS CISPR22 
Class A 


PC 27 


VCCI Class A 


EN 60950-4 


EN 55022 Class A, EN 


300 386 


CTR 12/13, DoC 


In Progress 


Yes 


Yes 


SRX650 
FCC Class A 
TIA-966 


CSA 60950-1 
ICES class A 
CS-03 


AS / NZS 
60950-1 


AS / NZS 
CISPR22 
Class A 


AS / ACIF S 
016 


AS / NZS 60950-1 


AS / NZS CISPR22 
Class A 


PTC 217 


VCCI Class A 


EN 60950-1 


EN 55022 
Class A, 
EN 300 386 


CTR 12/13, DoC 


Yes 


Yes 


Yes 
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Interface Modules Compatibility Matrix 










































































SRX-GP-16GE 16-port 10/100/1000BASE-T XPIM 
SRX-GP-16GE-POE 16-port 10/100/1000BASE-T PoE XPIM Xx x Xx x Xx v v 
SRX-GP-24GE 24-port 10/100/1000BASE-T XPIM, includes 4 SFP slots x x Xx x x ve lf 
SRX-GP-24GE-POE 24-port 10/100/1000BASE-T PoE XPIM, includes 4 SFP slots Xx x Xx x x ce Vv 
SRX-GP-8SFP 8-port GbE copper, fiber SFP XPIM Xx x Xx Xx X v Vv 
SRX-GP-DUAL-T1-E1 Dual T1/E1 GPIM Xx x x x Xx v Jv 
SRX-GP-QUAD-T1-E1 Quad T1/E1 GPIM Xx x Xx x Xx v v 
SRX-GP-1DS3-E3 -port clear channel DS3/E3 GPIM single GPIM slot Xx X x x x v Wf 
SRX-GP-8SERIAL Eight-port Sync Serial GPIM Xx x xX Xx Xx i Vv 
SRX-MP-1SERIAL -port Sync Serial Mini-PIM Xx x v Jv v 7 e x 
SRX-MP-1ADSL2-A -port ADSL2+ Mini-PIM supporting ADSL/ADSL2/ADSL2+ Annex A Xx Xx Jv Jv v ve x 
SRX-MP-1ADSL2-B -port ADSL2+ Mini-PIM supporting ADSL/ADSL2/ADSL2+ Annex B Xx Xx J Jv v ve x 
SRX-MP-1VDSL2-A -port VDSL2 Mini-PIM supporting Annex A, with fallback to ADSL2/ADSL2+ Xx x v v v vu x 
SRX-MP-8GSHDSL 8-wire (4-pair) GSHDSL Mini-PIM Xx x v Jv v ve x 
SRX-MP-1SFP-GE -port SFP Mini-PIM Xx x J v J ves x 
SRX-MP-1T1E -port T1 or E1 Mini-PIM Xx x v v v vas x 
SRX-MP-1T1E1-R -port T1 or E1 Mini-PIM (ROHS version) Xx x Xx x Xx wv" x 
SRX-MP-1VDSL2-R ~port VDSL2 Mini-PIM supporting Annex A, with fallback to ADSL2/ADSL2+ (ROHS x x x x Xx ys x 
version) 
SRX-MP-1SERIAL-R -port Sync Serial Mini-PIM (ROHS version) Xx x x x Xx Pe x 
+8 Not supported on the SRX550 High Memory 
** Only supported on the SRX550 High Memory 
Juniper Networks Services and Support Ordering Information 
Juniper Networks is the leader in performance-enabling services Model Number Description 
that are designed to accelerate, extend, and optimize your high- SRX650 Base System 
performance network. Our services allow you to maximize SRX650-BASE- SRX650 Services Gateway with SRE 6, 645 W AC PoE PSU; 
: : i . oe : SRE6-645AP includes 4 onboard 10/100/1000BASE-T ports, 2 GB DRAM, 2 
operational efficiency while reducing costs and minimizing risk, GB CF, 247 W PoE power, fan tray, power cord and rack-mount 
fa ‘ ; kit 
achieving a faster time to value for your network. Juniper Networks 
ae SRX650-BASE- SRX650 Services Gateway with SRE 6, 645 W DC PoE PSU; 
ensures operational excellence by optimizing the network to SRE6-645DP includes 4 onboard 10/100/1000BASE-T ports, 2 GB DRAM, 2 
‘ 4 : eT . +s GB CF, 247 W PoE power, fan tray, power cord and rack-mount 
maintain required levels of performance, reliability, and availability. kit 
For more details, please visit www.juniper.net/us/en/products- SRX650B-SRE6-645AP- Trade Agreement Act-compliant SRX650 Services Gateway with 
services TAA SRE 6, 645 W AC PoE PSU; includes 4 onboard 
= 10/100/1000BASE-T ports, 2 GB DRAM, 2 GB CF, 247 W PoE 


: power, fan tray, power cord and rack-mount kit 
Automated Support and Prevention 
SRX650 Power Supplies and Accessories 





Juniper's Automated Support and Prevention consists of an SRX600-PWR-645AC- Spare 645 W AC PoE power supply unit for SRX650, SRX550 
hee POE systems; one is included in SRX650, SRX550 base system 

ecosystem of tools, applications, and systems targeted towards (GRX650-BASE-SRE6-645AP, SRX550-645AP) 

simplifying and streamlining operations, delivering operational SRX600-PWR-645DC- 645 W DC source power supply for SRX550 and SRX650; 

efficiency, reducing downtime, and increasing your network's RO! POE provides 397 W system power @ 12 V and 248 W PoE power 
: , : @ 50 VDC; works with 43-56 VDC input; no power cord 

RUM ANE UNPEL Networks Junos operating system. Automated SRX600-SRE6H Spare SRE6-H for SRX650; one is included in SRX650 base 

Support and Prevention brings operational efficiency by automating system (SRX650-BASE-SRE6-645AP) 

several time-consuming tasks such as incident management SRX650-CHAS SRX650 chassis including fan tray; no system processor (SRE) 











, : ; . and no power supply unit 
inventory management, proactive bug notification and on-demand 








SRX650-FAN-O1 Spare SRX650 fan tray, one is included in SRX650 chassis spare 
EOL/EOS/EOE reports. The Junos Space Service Now and Service aL included in SRX650 base system (SRX650- 
Insight service automation tools are standard entitlements of all : 2 ; 

SRX650-FILT-01 Not included in SRX650 chassis spare (SRX650-CHAS), and not 
Juniper Care contracts. included in SRX650 base system (SRX650-BASE-SRE6-645AP); 








optional, as this is not required for normal operations, but 
recommended for dusty environments 
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Model Number 





1DY=sXelg{o) fey a) 


SRX650 Additional Software Feature Licenses 


S 


n 


Ca 1a 


n 


n 


WwW 


WwW 


WwW 


[Som Sa] 


wn 


n 


WwW 


ai 2 1a 


WwW 


(Soma 2a] 


wn 


n 


WwW 


WwW 


RX650-K-AV 


RX650-S-AV 


RX650-IDP 
RX650-S2-AS 


RX650-W-WF 


RX650-SMB4-CS 


RX650-S-SMB4-CS 


RX650-K-AV-3 


RX650-S-AV-3 


RX650-IDP-3 
RX650-S2-AS-3 


RX650-W-WEF-3 


RX650-SMB4-CS-3 


RX650-S-SMB4-CS-3 


RX-BGP-ADV-LTU 
RX650-K-AV-5 


RX650-S-AV-5 


RX650-IDP-5 
RX650-W-WEF-5 


RX650-SMB4-CS-5 


RX650-S-SMB4-CS-5 


x 


RAC-5-LTU 


x 


RAC-10-LTU 


RX-RAC-25-LTU 


x 


RAC-50-LTU 


RX-RAC-100-LTU 


RX-RAC-150-LTU 


RX-RAC-250-LTU 








RX-RAC-500-LTU 


RX650-APPSEC-A-1 





RX650-APPSEC-A-3 


One year subscription 


(e) 


One year subscription 


S 


One year subscription 


One year subscription 


S 


One year subscription 


u 


n SRX650 


RX650 


RX650 











pdates on SRX650 


or Juniper-Kaspersky antivirus updates 


or Juniper-Sophos antivirus updates on 


or IDP updates on SRX650 


or Juniper-Sophos antispam updates on 





or Juniper-Websense Web filtering 


One year security subscription for enterprise; includes 
Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP on 


S 


RX650 





One year security subscription for enterprise; includes Sophos 
AV, enhanced WF, Sophos AS, AppSecure and IDP on SRX650 


T 


ree year subscription 
RX650 


ree year subscription 


or Juniper-Kaspersky AV updates on 


or Juniper-Sophos AV updates on 


RX650 
or IDP updates on SRX650 


hree year subscription 
RX650 


or Juniper-Sophos antispam updates on 








hree year subscription 
pdates on SRX650 


S 

1 

S 

Three year subscription 
1 

S 

ail or Juniper-Websense Web filtering 
u 


Three year security subscription for enterprise; includes 
Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP on 
SRX650 











Three year security subscription for enterprise-includes Sophos 
AV, enhanced WF, Sophos AS, AppSecure and IDP on SRX650 


Advanced BGP License for SRX650 only 


Five year subscription for Juniper-Kaspersky AV updates on 
SRX650 


Five year subscription for Juniper-Sophos AV updates on 
SRX650 


Five year license for IDP updates for SRX650 


Five year subscription for Juniper-Websense Web filtering 
updates on SRX650 


Five year security subscription for enterprise; includes Kaspersky 
AV, enhanced WF, Sophos AS, AppSecure and IDP on SRX650 





Five year security subscription for enterprise; includes Sophos 
AV, enhanced WF, Sophos AS, AppSecure and IDP on SRX650 


Dynamic VPN Client: 5 simultaneous users for SRX100, SRX110, 
SRX210, SRX220, SRX240, SRX550, and SRX650 


Dynamic VPN Client: 10 simultaneous users for SRX100, 
SRX110, SRX210, SRX220, SRX240, SRX550, and SRX650 


Dynamic VPN Client: 25 simultaneous users for SRX100, 
SRX110, SRX210, SRX220, SRX240, SRX550, and SRX650 


Dynamic VPN Client: 50 simultaneous users for SRX210, 
SRX220, SRX240, SRX550, and SRX650 only 


Dynamic VPN Client: 100 simultaneous users for SRX220, 
SRX240, SRX550, and SRX650 only 


Dynamic VPN Client: 150 simultaneous users for SRX220, 
SRX240, SRX550, and SRX650 only 


Dynamic VPN Client: 250 simultaneous users for SRX240, 
SRX550, and SRX650 only 


Dynamic VPN Client: 500 simultaneous users for SRX550 and 
SRX650 only 

















One year subscription for Application Security and 
or SRX650 


PS updates 


Three year subscription for Application Security and IPS updates 
or SRX650 





Model Number 
SRX650-APPSEC-A-5 


SRX550 Base System 
SRX550-645AP-M 


SRX550-645DP-M 


SRX550- 645AP 


SRX550- 645DP 


SRX550 Power Supplies and Accessories 


WwW 


RX600-PWR-645AC- 
POE 


wn 


RX600-PWR-645DC- 
OE 


vu 


n 


RX550-CHAS 





WwW 


RX550-FILT-01 


SRX550 Additional Software Feature Licenses 


SRX550-K-AV 


n 


RX550-S-AV 


wn 


RX550-IDP 
RX550-S2-AS 


wn 


wn 


RX550-W-WF 


n 


RX550-SMB4-CS 


wn 


RX550-S-SMB4-CS 


wn 


RX550-K-AV-3 


WwW 


RX550-S-AV-3 


WwW 


RX550-IDP-3 
RX550-S2-AS-3 


wn 


wn 


RX550-W-WEF-3 


n 


RX550-SMB4-CS-3 


wn 


RX550-S-SMB4-CS-3 





wn 


RX550-K-AV-5 


1DY=xXelg|9) nfo) a) 


Five year subscription for Application Security and IPS updates 


for SRX650 


SRX550 Services Gateway with 4 GB DRAM and 8 GB CF, 2 RU 


height, 6 GPIM slots, 2 Mini-PIM slots, 6 10/ 


00/1000BASE-T 


ports, 4GbE SFP ports, dual PS slots, fans; ships with one 645 





wa 


rack-mount kit included 


) 


AC power supply with 247 W PoE power (power cord and 


SRX550 Services Gateway with 4 GB DRAM and 8 GB CF, 2 RU 


height, 6 GPIM slots, 2 Mini-PIM slots, 6 10/ 
AGbE SFP ports, dual PS slots, 
DC power supply with 247 W PoE power 
-mount kit included) 


ports, 
wa 
or racl 











00/1000BASE-T 
ans; ships with one 645 
(no power cord 


SRX550 Services Gateway, 2 RU height, 6 GPIM slots, 2 Mini- 
PIM slots, 6 10/100/1000BASE-T ports, 4GbE SFP ports, dual 


PS slots, fans; ships with one 645 wa 
247 WW PoE power (power cord and rack-mount ki 








AC power supply with 
included) 


SRX550 Services Gateway, 2 RU height, 6 GPIM slots, 2 Mini- 
PIM slots, 6 10/100/1000BASE-T ports, 4GbE SFP ports, dual 





PS slots, fans; ships with one 645 wa 














DC power supply with 





247 WW PoE power (no power cord and 


rack-moun 


kit Included) 


Spare 645 W AC PoE power supply unit for SRX550 and 
SRX650 systems; one is included in SRX550 and SRX650 base 
systems (SRX650-BASE-SRE6-645AP, SRX550-645AC) 


645 W DC source power supply for SRX550, SRX650 provides 
397 W system power @ 12 V and 248 W PoE power @ 50 





VDC; works with 43-56 VDC input; no power cord 


SRX550 Services Gateway, 2 RU height, 6 GPIM slots, 2 Mini- 


PIM slots, 6 10/100/1000BASE-T por 


PS slots, fans (power supply not included) 





s, 4 GbE SFP ports, dual 


Not included in SRX550 systems, optional, as this is not required 


for normal operations, but recommend 
environments 


One year subscription 
on SRX550 


One year subscription 


SRX550 
One year subscription for IDP updates 


One year subscription 
SRX550 














One year subscription 
updates on SRX550 


ed for dusty 


or Juniper-Kaspersky antivirus updates 


or Juniper-Sophos antivirus updates on 


on SRX550 


or Juniper-Sophos antispam updates on 


or Juniper-Websense Web filtering 


One year security subscription for enterprise; includes 
Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP on 


SRX550 





One year security subscription for enterprise; includes Sophos 
AV, enhanced WF, Sophos AS, AppSecure and IDP on SRX550 


Three year subscription 
RX550 


ree year subscription 
RX550. 


hree year subscription 
RX550 


hree year subscription 


S 

- 

S 

Three year subscription 
- 

S 

T 

updates on SRX550 


Three year subscription 
e 








Three year subscription 





or Juniper-Sop 


or IDP updates 


or Juniper-Sop 





or Juniper-Kaspersky AV updates on 


hos AV updates on 


on SRX550 


hos antispam updates on 
or Juniper-Websense Web filtering 
or enterprise; includes Kaspersky AV, 


nhanced WF, Sophos AS, AppSecure and IDP on SRX550 


or enterprise-includes Sophos AV, 


enhanced WF, Sophos AS, AppSecure and IDP on SRX550 





Five year subscription for Juniper-Kaspersky AV updates on 


SRX550 
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SRX Series Services Gateways for the Branch 


Model Number 





Description 


S 


Semrlval 


wn 


wn 


WwW 


WwW 


WwW 


nn 


wn 


WwW 


Gare (On 


n 


SRX240 Additional Software Feature Licenses 


§ 


WwW 


Cale 10a) 


Ww 


WwW 


RX550-S-AV-5 


RX550-IDP-5 
RX550-W-WEF-5 


RX550-SMB4-CS-5 


RX550-S-SMB4-CS-5 


RX-RAC-5-LTU 


RX-RAC-10-LTU 


RX-RAC-25-LTU 


RX-RAC-50-LTU 


RX-RAC-100- 


LTU 


RX-RAC-150- 


LTU 


RX-RAC-250-LTU 








RX-RAC-500-LTU 

RX550-APPSEC-A-1 
RX550-APPSEC-A-3 
RX550-APPSEC-A-5 
RX240 Base System 


RX240H2 


RX240H2-POE 


RX240H2-DC 


RX240-RMK 
RX240H-TAA 





RX240H-POE-TAA 


RX240-K-AV 


RX240-S-AV 


RX240-IDP 
RX240-S2-AS 


RX240-W-WF 





RX240-SMB4-CS 


SRX550 


Five year license 


AV, enhanced W 


AV, enhanced W 











SRX650 only 


One year subscri 
or SRX550 


or SRX550 





or SRX550. 


SRX240 Services 


Five year subscription for Juniper-Sophos AV updates on 


for IDP updates for SRX550 


Five year subscription for Juniper-Websense Web filtering 
updates on SRX550 


Five year security subscription for enterprise; includes Kaspersky 


F, Sophos AS, AppSecure and IDP on SRX550 





Five year security subscription for enterprise; includes Sophos 


F, Sophos AS, AppSecure and IDP on SRX550 


Dynamic VPN Client: 5 simultaneous users for SRX100, SRX110, 
SRX210, SRX220, SRX240, SRX550, and SRX650 


Dynamic VPN Client: 10 simultaneous users for SRX100, 
SRX110, SRX210, SRX220, SRX240, SRX550, and SRX650 


Dynamic VPN Client: 25 simultaneous users for SRX100, 
SRX110, SRX210, SRX220, SRX240, SRX550, and SRX650 


Dynamic VPN Client: 50 simultaneous users for SRX210, 
SRX220, SRX240, SRX550, and SRX650 only 


Dynamic VPN Client: 100 simultaneous users for SRX220, 
SRX240, SRX550, and SRX650 only 


Dynamic VPN Client: 150 simultaneous users for SRX220, 
SRX240, SRX550, and SRX650 only 


Dynamic VPN Client: 250 simultaneous users for SRX240, 
SRX550, and SRX650 only 


Dynamic VPN Client: 500 simultaneous users for SRX550 and 








ption for Application Security and IPS updates 


Three year subscription for Application Security and IPS updates 


Five year subscription for Application Security and IPS updates 


Gateway with 16 x GbE ports, 4x mini-PIM 


slots, and high memory (2 GB DRAM, 2 GB Flash); integrated 


power supply with power cord, and 19” rack mount kit included 


SRX240 Services Gateway with 


6 x GbE ports, 4x mini-PIM 


slots, and high memory (2 GB RAM, 2 GB Flash), with 16 ports 
PoE (150 W); integrated power supply with power cord, and 19” 


rack mount kit included 


SRX240 Services 





Gateway with 16 x GbE ports, 4x mini-PIM 


slots, and high memory (2 GB RAM, 2 GB Flash); integrated -48 


V DC power sup! 
SRX240 rack-mo 


Trade Agreemen 
16 GbE ports, 4 
GB Flash) 


Trade Agreemen 
16 GbE ports, 4 
GB Flash), with 1 


One year subscri 
on SRX240 


One year subscri 
SRX240 


One year subscri 


One year subscri 
SRX240 








ply with 19” rack mount kit included 


unt kit for 19 in rack (holds one unit) 


Act-compliant SRX240 Services Gateway with 
ini-PIM slots, and high memory (1 GB RAM, 1 


Act-compliant SRX240 Services Gateway with 
ini-PIM slots, and high memory (1 GB RAM, 1 
6 ports PoE (150 W) 


ption for Juniper-Kaspersky antivirus updates 


ption for Juniper-Sophos antivirus updates on 


ption for IDP updates on SRX240. 


ption for Juniper-Sophos antispam updates on 





One year subscri 


updates on SRX240 











ption for Juniper-Websense Web filtering 





One year security subscription for enterprise; includes 
Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP on 


SRX240 


Model Number 


wn 


WwW 


Ww 


Sooo 


WwW 


WwW 


WwW 


WwW 


WwW 


aS 100) 


WwW 


WwW 


WwW 


WwW 


WwW 


WwW 


wn 


WwW 


WwW 


WwW 


RX240-S-SMB4-CS 


RX240-K-AV-3 


RX240-S-AV-3 


RX240-IDP-3 
RX240-S2-AS-3 


RX240-W-WEF-3 


RX240-SMB4-CS-3 


RX240-S-SMB4-CS-3 


RX240-K-AV-5 


RX240-S-AV-5 


RX240-IDP-5 
RX240-S2-AS-5 


RX240-W-WEF-5 


RX240-SMB4-CS-5 


RX240-S-SMB4-CS-5 


RX240-S2-AS-5 


RX240-W-WEF-5 


RX240-SMB2-CS-5 


RX240-S-SMB-CS-5 


RX-RAC-5-LTU 


RX-RAC-10-LTU 
RX-RAC-25-LTU 
RX-RAC-50-LTU 
RX 


RAC-100-LTU 


RX-RAC-150-LTU 








RX-RAC-250-LTU 


RX240-APPSEC-A-1 


RX240-APPSEC-A-3 





RX240-APPSEC-A-5 


Description 


One year security subscription for enterprise; includes Sophos 
AV, enhanced WF, Sophos AS, AppSecure and IDP on SRX240 


n SRX240 


je} 


RX240 


RX240 





pdates on SRX240 


RX240 





Three year subscription 
ree year subscription 


hree year subscription 


~ 
S 

~ 

Three year subscription 
S 

Three year subscription 
u 


or Juniper-Kaspersky antivirus updates 


or Juniper-Sophos antivirus updates on 


or IDP updates on SRX240 


or Juniper-Sophos antispam updates on 





or Juniper-Websense Web filtering 


Three year security subscription for enterprise; includes 
Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP on 
S 

~ 








ree year security subscription for enterprise; includes Sophos 


AV, enhanced WF, Sophos AS, AppSecure and IDP on SRX240 


on SRX240 


SRX240 


SRX240 








updates on SRX240 


SRX240 


updates on SRX240 


Five year subscription 


Five year subscription 


Five year subscription 


Five year subscription 


Five year subscription 


or Juniper-Kaspersky antivirus updates 


or Juniper-Sophos antivirus updates on 


or IDP updates on SRX240 


‘or Juniper-Sophos antispam updates on 








or Juniper-Websense Web filtering 


Five year security subscription for enterprise; includes Kaspersky 
AV, enhanced WF, Sophos AS, AppSecure and IDP on SRX240 


Five year security subscription for enterprise; includes Sophos 
AV, enhanced WF, Sophos AS, AppSecure and IDP on SRX240. 
Five year subscription for Juniper-Sophos antispam updates on 


Five year subscription for Juniper-Websense Web filtering 


Five year security subscription for enterprise; includes Kaspersky 


Dynamic V' 
SRX210, S 


SRX110, S 


SRX110, S 


SRX220, S 


SRX240, S 


SRX240, S 





antivirus, Web fi 


Five year securit 
antivirus, Web fi 


PN C 


tering, Sophos antispam, and IDP on SRX240 


y subscription for enterprise; includes Sophos 
tering, Sophos antispam and IPS on SRX240 


ient: 5 simultaneous users for SRX100, SRX110, 





Dynamic VPN Client: 10 simultaneous users 


Dynamic VPN Client: 25 simultaneous users 


Dynamic VPN Client: 50 simultaneous users 


RX220, SRX240, SRX550, and SRX650 


or SRX100, 
RX210, SRX220, SRX240, SRX550, and SRX650 


or SRX100, 
RX210, SRX220, SRX240, SRX550, and SRX650 


or SRX210, 





RX240, SRX550 and SRX650 only 


Dynamic VPN Client: 100 simultaneous users for SRX220, 


RX550, and SRX650 only 


Dynamic VPN Client: 150 simultaneous users for SRX220, 





RX550, and SRX650 only 











Dynamic VPN Client: 250 simultaneous users for SRX240, 
SRX550, and SRX650 only 


One year subscription for Application Security and IPS updates 
or SRX240 


Three year subscription for Application Security and IPS updates 
or SRX240 


Five year subscription for Application Security and IPS updates 
or SRX240 
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SRX Series Services Gateways for the Branch 





Model Number Description 


SRX220 Base System 
SRX220H2 


SRX220H2-POE 


SRX220-RMK 
RX220-WALL-KIT 
SRX220-PWR-60W* 


WwW 


SRX220-K-AV 


SRX220-S-AV 


SRX220-IDP 
SRX220-S2-AS 


SRX220-W-WF 


SRX220-SMB4-CS 


SRX220-S-SMB4-CS 


SRX220-K-AV-3 


SRX220-S-AV-3 


n 


RX220-IDP-3 
SRX220-S2-AS-3 


SRX220-W-WF-3 


SRX220-SMB4-CS-3 


SRX220-S-SMB4-CS-3 


SRX220-K-AV-5 


SRX220-S-AV-5 


SRX220-IDP-5 
RX220-W-WE-5 


wn 


SRX220-SMB4-CS-5 


SRX220-S-SMB4-CS-5 


SRX-RAC-5-LTU 


SRX-RAC-10-LTU 


SRX-RAC-25-LTU 


SRX-RAC-50-LTU 











SRX-RAC-100-LTU 


SRX220 Additional Software Feature Licenses 


SRX220 Services Gateway with 8 GbE ports, 2 Mini-PIM slots, 
and high memory (2 GB RAM, 2 GB Flash); external power 
supply and cord included 


SRX220 Services Gateway with 8 GbE ports, 2 Mini-PIM slots, 
and high memory (2 GB RAM, 2 GB Flash), with 8 ports PoE 
(120 W)* 


SRX220 rack-mount kit for 19 in rack (holds one unit) 
SRX220 wall mount kit (holds one unit) 


Spare SRX220 switching power supply, 
60 W (non-POE) 


One year subscription for Juniper-Kaspersky antivirus updates 


on SRX220 


= 


= 


One year subscription for Juniper-Sophos antivirus updates on 


SRX220 


= 


One year subscription for IDP updates on SRX220 


One year subscription for Juniper-Sophos antispam updates on 


SRX220 


= 














One year subscription for Juniper-Websense Web filtering 


updates on SRX220 


= 


One year security subscription for enterprise; includes 
Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP on 
SRX220 





One year security subscription for enterprise; includes Sophos 
AV, enhanced WF, Sophos AS, AppSecure and IDP on SRX220 


Three year subscription for Juniper-Kaspersky antivirus updates 


on SRX220 


= 


hree year subscription for Juniper-Sophos antivirus updates on 


RX220 


a 


= 


hree year subscription for IDP updates on SRX220 


= 


Juniper-Sophos antispam updates on 
RX220 








ree year subscription for Juniper-Websense Web filtering 


pdates on SRX220 


= 


1 
S 
1 
Three year subscription fo 
S 
~ 
u 


ree year security subscription for enterprise; includes 
aspersky AV, enhanced WF, Sophos AS, AppSecure and IDP on 
RX220 





NAA 








Three year security subscription for enterprise; includes Sophos 
AV, enhanced WF, Sophos AS, AppSecure and IDP on SRX220 


Five year subscription for Juniper-Kaspersky antivirus updates 
on SRX220 


Five year subscription for Juniper-Sophos antivirus updates on 
SRX220 


Five year subscription for IDP updates on SRX220 


Five year subscription for Juniper-Websense Web filtering 
updates on SRX220 


Five year security subscription for enterprise; includes Kaspersky 
AV, enhanced WF, Sophos AS, AppSecure and IDP on SRX220 





Five year security subscription for enterprise; includes Sophos 
AV, enhanced WF, Sophos AS, AppSecure and IDP on SRX220 


Dynamic VPN Client: 5 simultaneous users for SRX100, SRX110, 
SRX210, SRX220, SRX240, SRX550, and SRX650 


Dynamic VPN Client: 10 simultaneous users for SRX100, 
SRX110, SRX210, SRX220, SRX240, SRX550, and SRX650 


Dynamic VPN Client: 25 simultaneous users for SRX100, 
SRX110, SRX210, SRX220, SRX240, SRX550, and SRX650 


Dynamic VPN Client: 50 simultaneous users for SRX210, 
SRX220, SRX240, SRX550, and SRX650 














Dynamic VPN Client: 100 simultaneous users for SRX220, 
SRX240, SRX550, and SRX650 





Model Number 


S 


WwW 


WwW 


WwW 


nn 


n 


RX-RAC-150-LTU 


RX220-APPSEC-A-1 


RX220-APPSEC-A-3 


RX220-APPSEC-A-5 


RX210 Base System 
RX210HE2 





RX210HE2-POE 


Dynamic VPN Client: 150 simultaneous users for SRX220, 
SRX240, SRX550, and SRX650 


One year subscription for Application Security and IPS updates 
or SRX220 


Three year subscription for Application Security and IPS updates 
or SRX220 


Five year subscription for Application Security and IPS updates 
or SRX220 





SRX210 Services Gateway with 2 GbE+ 6 Fast Ethernet ports, 1 
Mini-PIM slot, 1 ExpressCard slot and high memory (2 GB RAM, 
2 GB Flash) 


SRX210 Services Gateway with 2 GbE + 6 Fast Ethernet ports, 
1 Mini-PIM slot, 1 ExpressCard slot and high memory (2 GB 
RAM, 2 GB Flash), with 4 ports PoE (50 W) 


SRX210 Additional Hardware 


§) 
S 
S| 
S| 
S| 
S| 
S 


wn 


WwW 


(Som sel 


Ga: OO, 


RX210-DESK-STAND 
RX210-RMK 
RX210-WALL-KIT 
RX210-PWR-60W-* 
RX210-PWR-150W-* 





RX210-K-AV 


RX210-S-AV 





RX210-IDP 
RX210-S2-AS 


RX210-W-WF 


RX210-SMB4-CS 


RX210-S-SMB4-CS 


RX210-K-AV-3 


RX210-S-AV-3 


RX210-IDP-3 
RX210-S2-AS-3 


RX210-W-WEF-3 


RX210-SMB4-CS-3 


RX210-S-SMB4-CS-3 


RX210-K-AV-5 


RX210-S-AV-5 


RX210-IDP-5 
RX210-S2-AS-5 


RX210-W-WEF-5 





RX210-SMB4-CS-5 


RX210 Additional Software Feature Licenses 


SRX210 desk top stand (holds one unit) 

SRX210 rack-mount kit for 19 in rack (holds one unit) 
SRX210 wall mount kit (holds one unit) 

Spare SRX210 switching power supply, 60 W (non-PoE) 
Spare SRX210 switching power supply, 150 W (PoE) 


One year subscription fo 
on SRX210 


= 


Juniper-Kaspersky antivirus updates 


One year subscription fo 
SRX210 


= 


Juniper-Sophos antivirus updates on 


One year subscription fo 


= 


IDP updates on SRX210 


= 


One year subscription fo 
SRX210 


Juniper-Sophos antispam updates on 














One year subscription fo 
updates on SRX210 


= 


Juniper-Websense Web filtering 


One year security subscription for enterprise; includes 
Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP on 
SRX210 





One year security subscription for enterprise; includes Sophos 
AV, enhanced WF, Sophos AS, AppSecure and IDP on SRX210 


Three year subscription for Juniper-Kaspersky antivirus updates 
on SRX210 


Three year subscription fo 
SRX210 


= 


Juniper-Sophos antivirus updates on 


Three year subscription fo 


~ 


IDP updates on SRX210 


Three year subscription fo 
SRX210 


= 


Juniper-Sophos antispam updates on 








Three year subscription for Juniper-Websense Web filtering 
updates on SRX210 





Three year security subscription for enterprise; includes 
aspersky AV, enhanced WF, Sophos AS, AppSecure and IDP on 
RX210 





DA 








Three year security subscription for enterprise; includes Sophos 
AV, enhanced WF, Sophos AS, AppSecure and IDP on SRX210 


Five year subscription for Juniper-Kaspersky antivirus updates 
on SRX210 


Five year subscription for Juniper-Sophos antivirus updates on 
SRX210 


Five year subscription for IDP updates on SRX210 


Five year subscription for Juniper-Sophos antispam updates on 
SRX210 














Five year subscription for Juniper-Websense Web filtering 
updates on SRX210 








Five year security subscription for enterprise; includes Kaspersky 
AV, enhanced WF, Sophos AS, AppSecure and IDP on SRX210 
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SRX Series Services Gateways for the Branch 


Model Number 


S 


Ss 
Ss) 
S 
S 
g 
S| 
S| 
S 
Ss 
S 


SRX110 Additional Hardware 
RX110-DESK-STAND 


n 


RX-RAC-5-LTU 


RX-RAC-10-LTU 


RX-RAC-25-LTU 


RX-RAC-50-LTU 


RX210-APPSEC-A-1 


RX210-APPSEC-A-3 


RX210-APPSEC-A-5 


RX-SFP-1GE-LH 
RX-SFP-1GE-LX 
RX-SFP-1GE-SX 
RX-SFP-1GE-T 
RX-SFP-FE-FX 
RX-MP-1SFP-GE 
RX-GP-8SFP 
RX110 Base System 
RX110H2-VA 








RX110H2-VB 


RX110-RMK 
RX110-WALL-KIT 


RX100 Base System 
RX100H2 


RX100-PWR-30W-* 


RX-100-RMK 
RX100-WALL-KIT 


RX-RAC-5-LTU 


RX-RAC-10-LTU 








RX-RAC-25-LTU 


RX1XX-K-AV 
RX1XX-K-AV-3 
RX1XX-K-AV-5 
RX1XX-S-AV 
RX1XX-S-AV-3 





RX210-S-SMB4-CS-5 


RX100-DESK-STAND 





1DY=xXelg|o) ale) a) 


Five year security subscription for enterprise; includes Sophos 
AV, enhanced WF, Sophos AS, AppSecure and IDP on SRX210 


Dynamic VPN Client: 5 simultaneous users for SRX100, SRX110, 
SRX210, SRX220, SRX240, SRX550, and SRX650 


Dynamic VPN Client: 10 simultaneous users for SRX100, 
SRX110, SRX210, SRX220, SRX240, SRX550, and SRX650 


Dynamic VPN Client: 25 simultaneous users for SRX100, 
SRX110, SRX210, SRX220, SRX240, SRX550, and SRX650 


Dynamic VPN Client: 50 simultaneous users for SRX210, 
SRX220, SRX240, SRX550, and SRX650 only 





One year subscription for Application Security and IPS updates 
or SRX210 








Three year subscription for Application Security and IPS updates 
or SRX210 


Five year subscription for Application Security and IPS updates 
or SRX210 





mall Form Factor Pluggable (SFP) Transceivers 


SFP 1000BASE-LH Optica 
SFP 1000BASE-LX Optical Transceiver 
SFP 1000BASE-SX Optical Transceiver 
SFP 1000BASE-T Copper Transceiver 

SFP 100BASE-FX Optical Transceiver 

Single-port SFP Mini-PIM 
8-port GbE copper, fiber SFP XPIM 


Transceiver 











SRX110 Services Gateway with 8xFE ports, 2 GB RAM and 
Flash, 1-port VDSL2/ADSL2+ over POTS, USB port for cellular 
modem connectivity, and external PS and cord included 


SRX110 Services Gateway with 8xFE ports, 2 GB RAM and 
Flash, 1-port VDSL2/ADSL2+ over ISDN BRI, USB port for 
cellular modem connectivity, and external PS and cord included 


SRX110 desktop stand; holds one unit 


SRX110 rack-mount kit; holds one unit 





SRX110 wall mount kit; holds one unit 


SRX100 Services Gateway with 8xFE ports and high memory (2 
GB RAM, 2 GB Flash) 


RX100 Additional Hardware 


Spare SRX100 switching power supply, 
30 W (non-PoE) 


SRX100 19” rack-mount kit (holds two units) 
SRX100 wall mount kit (holds one unit) 
SRX100 desk stand (holds one unit) 


RX100/SRX110 Dynamic VPN Client 


5 simultaneous users for SRX100, SRX110, SRX210, SRX220, 
SRX240, SRX550, and SRX650 


10 simultaneous users for SRX100, SRX110, SRX210, SRX220, 
SRX240, SRX550, and SRX650 


25 simultaneous users for SRX100, SRX110, SRX210, SRX220, 
SRX240, SRX550, and SRX650 


RX100/SRX110 Additional Software Feature Licenses ~ 


One year subscription for Juniper-Kaspersky AV updates 
Three year subscription for Juniper-Kaspersky AV updates 
Five year subscription for Juniper-Kaspersky AV updates 


One year subscription for Juniper-Sophos AV updates 





Three year subscription for Juniper-Sophos AV updates 


Gas Gane Nis 1 


Sate eat 


RX 


RX 
RX 


RX 


RX 


RX 


RX 


RX 


RX 


RX 


RX 


RX 
RX 


RX 
RX 


RX 


RX 


RX 


RX 


RX 


RX 


RX 


RX 


RX 


RX 


RX 


RX 
RX 








RX1XX- 


RX1XX- 





XX-S-AV-5 


RX1XX-S2-AS 
RX1XX-S2-AS-3 


XX-S2-AS-5 
XX-W-EWF 


XX-W-EWF-3 


XX-W-EWF-5 


XX-SMB4-CS 


XX-SMB4-CS-3 





XX-SMB4-CS-5 


XX-S-SMB4-CS 


XX-S-SMB4-CS-3 


XX-S-SMB4-CS-5 


XX-IDP 
XX-IDP-3 


RX1XX-IDP-5 
RX1XX- 


-AV-3-R 


-AV-5-R 





-AV-R 


RX1XX-S-AV-3-R 
RX1XX-S-AV-5-R 


XX-S-AV-R 
XX-S2-AS-3-R 


XX-S2-AS-5-R 


XX-S2-AS-R 


XX-W-EWF-3-R 


XX-W-EWF-5-R 


XX-W-EWF-R 


XX-SMB4-CS-R 


XX-SMB4-CS-3-R 





XX-SMB4-CS-5-R 


XX-S-SMB4-CS-R 


XX-S-SMB4-CS-3-R 


XX-S-SMB4-CS-5-R 


XX-IDP-R 
XX-IDP-3-R 


Five year subscription for Juniper-Sophos AV updates 

One year subscription for Juniper-Sophos antispam updates 
Three year subscription for Juniper-Sophos antispam updates 
Five year subscription for Juniper-Sophos antispam updates 


One year subscription for Juniper-Websense enhanced Web 
filtering updates 


Three year subscription for Juniper-Websense enhanced Web 
filtering updates 





Five year subscription for Juniper-Websense enhanced Web 
filtering updates 


One year security subscription for enterprise; includes 
aspersky AV, enhanced WF, Sophos AS, AppSecure and IDP 





Three year security subscription for Kaspersky AV, enhanced 


WF, Sophos AS, AppSecure and IDP 








Five year security subscription for enterprise; includes Kaspersky 
AV, enhanced WF, Sophos AS, AppSecure and IDP 


One year security subscription for enterprise; includes Sophos 
AV, enhanced WF, Sophos AS, AppSecure, AppSecure and IDP 


Three year security subscription for enterprise; includes Sophos 
AV, enhanced WF, Sophos AS, AppSecure and IDP 


Five year security subscription for enterprise; includes Sophos 
AV, enhanced WF, Sophos AS, AppSecure and IDP 





One year license for IDP updates 


Three year license for IDP updates 





Five year license for IDP updates 


Three year renewal subscription for Juniper-Kaspersky AV 
updates 


Five year renewa 
updates 


subscription for Juniper-Kaspersky AV 


One year renewal subscription 
updates 


or Juniper-Kaspersky AV 


Three year renewal subscription for Juniper-Sophos AV updates 
Five year renewal subscription for Juniper-Sophos AV updates 
One year renewal subscription for Juniper-Sophos AV updates 


Three year renewal subscription for Juniper-Sophos antispam 
updates 


Five year renewal subscription 
updates 


or Juniper-Sophos antispam 











One year renewal subscription 
updates 


or Juniper-Sophos antispam 





Three year renewal subscription for Juniper-enhanced 
Websense enhanced Web filtering updates 


Five year renewal subscription for Juniper-enhanced Websense 
enhanced Web filtering updates 





One year renewal subscription for Juniper-enhanced Websense 
enhanced Web filtering updates 


One year renewa 
Kaspersky AV, enhanced WF, Sophos AS, AppSecure and 


security subscription for enterprise; includes 
DP 


Three year renewal security subscription for enterprise; includes 
Kaspersky AV, enhanced WF, Sophos AS, AppSecure and IDP 


Five year renewa 
Kaspersky AV, enhanced WF, Sophos AS, AppSecure and 


security subscription for enterprise; includes 
DP 








One year renewal security subscription for enterprise; includes 
Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP 


Three year renewal security subscription for enterprise; includes 
Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP 


Five year renewal security subscription for enterprise; includes 
Sophos AV, enhanced WF, Sophos AS, AppSecure and IDP 














One year renewal subscription for IDP Signature service 


Three year renewal subscription for IDP Signature service 
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Model Number Description About Juniper Networks 


SRX1XX-IDP-5-R Five year renewal subscription for IDP Signature service 





Juniper Networks challenges the status quo with products, 
SRX100-APPSEC-A-1 One year subscription for Application Security and IPS updates 


for SRX100 solutions and services that transform the economics of networking. 


SRX100-APPSEC-A-3 Three year subscription for Application Security and IPS updates | Our team co-innovates with customers and partners to deliver 

for SRX100 e =i 

7 automated, scalable and secure networks with agility, performance 
SRX100-APPSEC-A-5 Five year subscription for Application Security and IPS updates 


for SRX100 and value. Additional information can be found at Juniper Networks 


*See price list for country-specific power cord model numbers. or connect with Juni per on Twitter and Faceboo k. 
** The additional software feature licenses apply to both the SRX100 and the SRX110. 





Corporate and Sales Headquarters APAC and EMEA Headquarters JU al | Per | Engineering 
Juniper Networks, Inc. Juniper Networks International B.V. Boeing NETWORKS” Simplicity 
1133 Innovation Way Avenue 240 1119 PZ Schiphol-Rijk 

Sunnyvale, CA 94089 USA Amsterdam, The Netherlands 

Phone: 888.JUNIPER (888.586.4737) Phone: +31.0.207.125.700 

or +1.408.745.2000 


www.juniper.net 
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